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(54) Control system 

(57) A control system for use in 
connection with one or more 
facilities comprising means for 
receiving information identifying a 
particular token, which system is 
operable so as, when intermittently 
presented with the token after 
receiving said identifying information, 
to recognise that token as a key and 
to permit access to and/or operation 
of one or more of the facilities until a 
predetermined time has elapsed or a 
selected event has occurred and until 
then not to recognise tokens of other 
random users, and thereafter no 
longer to permit access to and/or 
operation of the or each facility until 
further identifying information relating 
to a valid token is received. 
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SPECIFICATION 
Control system 

5 The present Invention relates to a control system operative to recognise a token carried by a 5 
user so as to permit access to one or more facilities. In a particular embodiment, the system is 
operable to recognise a token as a key for a door lock. For example, the control system may be 
operable to recognise a token as a key for the door of a hotel room or for the doors of a hired 
vehicle forming part of an urban transport system. 

10 According to a first aspect of the present invention we provide a control system for use in 10 
connection with one or more facilities comprising means for receiving information identifying a 
particular token, which system is operable so as, when intermittently presented with the token 
after receiving said identifying information, to recognise that token as a key and to permit 
access to and/or operation of one, or more of the facilities until a predetermined time has 

15 elapsed or a selected event has occurred and until then not to recognise tokens of other ramdon 15 
users, and thereafter no longer to permit access to and/or operation of the or each facility until 
further identifying information relating to a valid token is received. 

The selected event may be presentation of the token to the control system in a particular 
manner and/or at a particular time. 

20 Preferably, the control system initially checks the validity of the token and is operable to cause 20 
rejection of an invalid token. 

The identifying information may initially be received as the result of reading information from 
the token. Alternatively, the identifying information may initially be received from a source other 
than the token. 

25 The control system may be operable to permit a token to function as a key to a lock. The 25 
control system may be adapted for use with the token in the form of a credit card. 

The control system may comprise a central control unit in communication with a plurality of 
auxiliary control units wherein each auxiliary unit is in communication with at least one facility 
and is responsive to signals from the central control unit. The selected event may be the receipt 
30 by an auxiliary control unit of a selected signal from the central control unit. 30 
The identifying information may be sent to the auxiliary control units from the central control 
unit. Alternatively, the identifying information may be sent to the central control unit via an 
auxiliary control unit. 

According to another, independent, aspect of the present invention we provide a control 
35 system for use in connection with one or more facilities comprising means for receiving infqrrna- 35 
tion identifying a payment token and/or the owner thereof to enable payment to be made for 
the use of the or each facility, which system is adapted also to recognise the payment token as 
a key and to permit access to and/or operation of one or more of the facilities when intermit- 
tently presented with the token after receiving said identifying information. * 
40 The payment token may be in the form of a credit card. 40 
The second aspect of the present invention which relates to the dual role of the payment 
token as a means enabling payment for use of a facility and as a means for gaining access to 
and/or permitting operation of a facility is independent of the exclusivity feature inherent in a 
control system according to the first aspect of the present invention in which tokens of other 
45 random users are not recognised while a facility is being used by a particular user. 45 
Particular embodiments of the present invention will now be described, by way of example, 
with reference to the accompanying drawings in which: 

Figure 1 is a schematic diagram of a control system according to a first embodiment of the 
present invention; 

50 Figure 2 is a block diagram representing a charging station computer; 50 
Figure 3 is a block diagram representing an in-car computer; 

Figure 4 is a schematic diagram of a control system according to a second embodiment of the 
present invention. 

In general terms, in the first embodiment a control system according to the present invention 
55 is incorporated in an urban transport system in which electrically powered vehicles are let for 55 
hire. The transport system comprises vehicle charging stations at different locations, each vehicle 
charging station comprising several charging points. A vehicle can be collected for hire by a user 
from a charging point at a vehicle charging station and, after use, can be returned to a charging 
point for recharging at the sam , or at a different, charging station. 
60 Vehicles may be hired by users having any one of the commonly used credit cards carrying 60 
identifying information in magnetic form, which information is readable by wiping th credit card 
through the jaws on a card reader of known typ . 

Each vehicle is provided with a credit card r ader in the form of a pair of jaws mount d 
xt rnally on the vehicle body just b hind th opening for the driver door. Th hir of a vehicl 
65 is initiated by th user wiping his or her cr' dit card through th r ader. Thereaft r, alternately 65 
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wiping that particular credit card through the reader jaws causes locking and unl eking of the . 
vehicle doors thereby obviating the need to issue a separate door key to each user. That 
particular credit card is recognised by the control system until the car is returned to the charging 
point and the hire is terminated. If, during the hire, another person wipes a credit card of theirs 
5 through the reader jaws, it will not be recognised by the control system. Thus, another random 5 
user cannot interrupt the hire while the vehicle is being used by the first user, for example, 
when the vehicle is parked and left temporarily unattended by the first user. 

It is however envisaged to provide master cards for service mechanics to enable them to gain 
access to any of the vehicles at all times. 
10 Therefore, the control system is operative to allow a user to use a credit card to initiate a hire 10 
transaction and to enable a bill to be sent to the user at a later date and also to lock and 
unlock the vehicle doors during the hire period. The credit card thus takes on a dual role during 
that time. The credit card may also be used to terminate the hire transaction. 

Referring now to Fig. 1, the control system comprises a central computer 10 In communi- 
15 cation with several charging station computers 12, one at each charging station 13, and an in- 15 
car computer 14 in each vehicle. In Fig. 1, for simplicity only one charging station computer 12 
is shown and is connected to the in-car computers 14 of two vehicles connected to charging 
points 15 at the charging station 13. 

The central computer 10 is in duplex communication with each of the charging station com- 
20 puters 12 and is linked to these by a fixed communication network of dedicated lines supervised 20 
by the central computer 10. Each one of the in-car computers 14 is linked temporarily to one of 
the charging station computers 12 when the vehicle in question is connected to a charging point 
in the relevant charging station. The in-car computers 14 which are connected to a charging 
station computer 12 form a local network supervised by the charging station computer. During 
25 that time, the charging station computer 12 acts more or less transparently to permit the central 25 
computer 10 to communicate with any one of the in-car computers 14. When the vehicles are 
on hire and away from a charging station, the in-car computers 14 operate automonously 
without any communication with the central computer 10 or with any of the charging station 
computers 12. 

30 The charging connection between a vehicle and a charging point may be achieved by the user 30 
manually plugging the vehicle into a charging point or by an automatic connection effected when 
the vehicle is driven up to charging point, for example, the vehicle may be provided with a fin 
receivable in a slot provided in the charging point. When a vehicle is connected to a charging 
point, its in-car computer 14 communicates with the charging station computer 12 via an RF 

35 connection. The communication links between a charging station computer 12 and the in-car 35 
computers 14 in the vehicles on charging points at that charging station is of a multi-drop 
configuration and each of the in-car computers 14 is poled in sequence by the charging station 
computer 12, after first being identified on arrival by a special polling protocol, to collect data 
from the in-car computers 14 and to transmit messages to them. 

40 The central computer 10 is responsible for overall supervision of the charging station com- 40 
puters 12 and the in-car computers 14 and also performs accounting functions and holds 
records containing customer details, current hire tarrifs, information relating to the vehicles for 
hire and their current operational status and information regarding the availability of parking 
space in each charging station. The central computer is also in communication with a central 

45 register holding current information relating to stolen credit cards so that the authenticity of a 45 
user's credit card can be checked. 

The charging station computers 12 supervise vehicle hire and return and parking space reser- 
vation procedures with the support of the central computer 10. In the event of communication 
with the central computer 10 being temporarily impossible due to computer or communications 

50 failure, the charging station computers 12 have a limited ability to act automonously to handle 50 
hire returns and invoicing as will be described. 

The charging station computers 12 are powered from the mains. The in-car computers 14 are 
powered from their vehicle batteries. In both cases, a RAM battery back-up is provided which 
will be recharged from the logic power supply. 

55 Referring to Fig. 2, each charging station computer 12 comprises an Intel 8085 microproces- 55 
sor 16, an EPROM 18 for storing the application programmes and fixed data, a CMOS RAM 20 
for storing variables such as time of day, hire tariffs etc, a coded switch 22 carrying a v hide 
station identification code and a timer 24. The peripheral equipment associated with each 
charging station computer 12 comprises a cassette unit 26, a card reader 28, a keypad 30, a 

60 display 32, a printer 34 and an "all spaces r served" sign 36. Suitable interfac s and drivers 60 
are provided for the peripheral components as indicat d in Fig. 2. 

The charging station computer 12 communicates with the in-car computers 14 of vehicles at 
charging points via a serial communications interfac 38 and a modulator 40 and communicates 
with the central computer 10 via a s rial communications interfac 42 and a modem 44. 

65 The cassette unit 26 is inaccessible to th public and is used to store information passed 65 



3 



GB2178211A 3 



between in-car computers 14 and the relevant charging station comput r 12 during any periods 
when communicati n with the central computer 10 is impossible. When communication with the 
central computer 10 resumes, the information stored on cassette is recovered and transmitted to 
the central computer 10. 

5 The card reader 28, keypad 30, display 32 and printer 34 are accessible to the public. They 5 

are all of known type and are of vandal-proof construction. 
When the card reader 28 is presented with a credit card a PLEASE WAIT message is shown 

on the display 32 whilst the charging station computer 12 determines the card category without 

referring to the central computer 10. If the credit card is from a new hirer then a GO TO CAR 
10 message is shown on the display 32. If the credit card is one from a recently returned hirer then 10 

a receipt is printed by the printer 34. The printer 34 is also used for printing general messages 

from the central computer 10. % 
The keypad 30 comprises numeric keys (0-9) and two function keys-a PARKING key for 

making a parking space reservation request and an ENTER key. A map of all of the charging 
15 stations in the area is provided at each charging station. Each charging station is given a 15 

particular reference number so that the user can key in the number of the charging station at 

which he wishes to reserve a parking space. The display 32 indicates acknowledgement or 

rejection of parking space reservation requests and may also display any general messages 

about road or parking conditions sent to it from the central computer 10. 
20 The "all spaces reserved" sign is lit up when all the charging points at a charging station are 20 

either being used by vehicles or are reserved as parking spaces for vehicles yet to arrive. 
Similarly to the charging station computers 12, each of the in-car computers 14 comprises an 

Intel 8085 microprocessor 46, a EPROM 48, RAM 50, coded switch 52 carrying a particular 

vehicle identity code and timer 54. 
25 The in-car computer 14 is connected to a card reader 56 comprising a pair of jaws and a 25 

display 58 mounted externally on the particular vehicle and to a keypad 60, display 62 and 

voice synthesis system 64 inside the vehicle. The in-car computer 14 is also connected to an 

LED strip display inside the vehicle, and to switches controlling the door locks, a parking brake, 

an emergency beacon, a reduced power output and the vehicle motor. 
30 Various sensors for sensing the charge-state of the battery, the motor current, whether the 30 

vehicle is in motion or on charge and the mileage covered are each connected to an appropriate 

digital input unit 68 for providing signals to the microprocessor 46. 
A serial communications interface 70 enables communication between the in-car computer 14 

and a charging station computer 12 via a modulator 72. 
35 In response to presentation of a user's credit card, signals from the external card reader 56 35 

will transmit serial information to the microprocessor 46 which will be used to qualify the hirer 

for charging purposes at the start of hire, to lock and unlock the vehicle doors during the period 

of hire and to terminate the hire. 
The external display 58 displays messages such as: 
40 40 

BATTERY DEAD CONNECTED 

BATTERY LOW PLEASE WAIT 

ON CHARGE REENTER CARD 

CAR UNSERVICEABLE O.K. 
45 RESERVED ON HIRE 45 

AVAILABLE FOR HIRE HIRE REFUSED 

The display 62 inside the vehicle displays the charge accumulated for the current hire which is 
a function of the hire time and the LED strip display indicates the time remaining before the 
50 vehicle battery requires charging. The internal display 62 also operates in conjunction with the 50 
keypad 60 to echo keyed selections and to warn of the consequences of confirming a selection. 
When a vehicle is at a charging point, the display 62 also displays messages received from the 
central computer 10. 

The keypad 60 comprises numeric (0-9) keys and function keys-a RESERVE key for reserving 
55 the vehicle for further use, a BEACON ON key, an UNSERVICEABLE key and an ENTER key. 55 
Selections are confirmed by typing 999 and pressing the ENTER key. 

The voice synthesiser 64 comprises a voice synthesis unit 74 and a speaker 76 and is used 
to provide an audible warning to the user if the battery voltage is low and also reminds the hirer 
to remove all his goods at the end of the hire period. Audio messages include "battery dead", 
60 "battery low" and "terminate hire instructions". 60 
The emergency beacon is operable to transmit radio signals to permit location of the vehicle in 
the case of battery failure or other break-down and in the case f some forms of unauthorised 
use. The emergency beacon is independently battery powered. 
The door locks are each op rated by a solenoid switch r sponsive to signals from the 
65 processor 46. 65 
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In use, the battery voltage measured will be compared against reference "low" and "dead" 
limits. The "low" limit indicates an urgent need to recharge and in that event further use of the 
vehicle will only be permitted at reduced power. If the battery voltage has reached the "dead" 
limit the in-car computer 14 prevents further use of the vehicle, outputting BATTERY DEAD on 
5 the external display 58, turning off the motor and emitting an audio message to the user. The 5 
emergency beacon is then activated. In fact, a battery reserve is available but is only released in 
response to presentation of a master card to the card reader 56. 

The following page is a summary of the messages which pass between the central computer 
10 and the charging station computers 12 and between each charging station 12 and the in-car 
10 computers 14 of the vehicles at that charging station — 10 
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COMMUNICATIONS MESSAGE SUMMARY 
Car < — > Charging SUU°Q 



<- CAR I.D. POLE 



<- 



< > Centr al_ Qgraguter 

<- STATION I.D. POLE <- 



1Q <- NEW ARRIVAL pole <- 
-> CAR STATUS aessage -> 



<- STATUS INTERROGATION <- 



15 



20 



-> TERMINATE HIRE 



25 -O REQUEST FOR- HIRE -> 
<- AUTHOR I 2 E/ REFUSE <- 

30 



35 



40 



45 



50 



<- FREE MESSAGE (Car) <- 



<- BEACON OFF <- 
<- RETURN TO SERVICE <- 
<- RELEASE RESERVATION <- 



-> ARRIVAL aessage -> 
-> STATUS aessage -> 



<- STATUS INTERROGATION <- 
-> STATION STATUS aessage-> 



-> 



-> TERMINATE HIRE 
-> CHARGE message 



-> REQUEST FOR HIRE 
<- GOOD/BAD CARD 



-> 

-> 



<- 



-> PARKING SPACE REQUEST -> 



<- CONFIRM/REFUSE 



<- 



<- FREE MESSAGE (Car) <- 

<- FREE MESSAGE (Ch.St.) <- 

-> DEPARTURE message -> 

<- BEACON OFF <- 

<- RETURN TO SERVICE <- 

<- RELEASE RESERVATION <- 



<- CAR PARK FULL/SPACE <- 
-> CASSETTE DUMP -> 
<- STRATEGIC DATA aessage<- 



10 



15 



20 



25 



30 



35 



40 



45 



50 
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Reading from the top of that summary the central computer 10 sends regular STATION ID 
polling signals to each charging station computer 12 to permit information to be sent from each 
charging station 12 to the central computer 10. Likewise, each of the charging stations 12 
sends regular polling signals to the in-car computers 14 of the vehicles at that charging station. 
5 The system is programmed so that the in-car computers 14 in all of the vehicles at a charging 5 
station are receptive to NEW ARRIVAL pole messages from the charging station computer 1 2. 
This polling message sets the receiving ID (which will then be unknown) to zero and, if an in-car 
computer 14 is receiving that pole for the first time on returning to a charging station, it will 
respond by giving its ID in a CAR STATUS message containing information about the battery 
10 state and whether the car is: serviceable or unservicable, on charge, reserved or available; 10 
together with information as to the state of the beacon and the time of day from the in-car 
computer clock. 

The charging station computer 12 sends regular STATUS INTERROGATION messages to the 
in-car computers 14 connected thereto and the in-car computers 14 respond with CAR STATUS 
15 messages which are transmitted via the charging station computer 12 to the central computer 15 
10. Likewise, the central computer 10 transmits STATUS INTERROGATION messages to each 
charging station computer 12 which responds by providing information relating to the number of 
vehicles presently at that station, the number of available parking spaces etc in a STATION 
STATUS message to the central computer 10. 
20 On termination of a hire, a TERMINATE HIRE message is sent from the in-car computer 14 to 20 
the central computer 10 via the charging station computer 12 and the charging station computer 
12 also sends a CHARGE message to the central computer 10 including information regarding 
the hire charge calculated, VAT calculation, invoice serial number and the time of day. 
When a new hirer wipes his or her credit card through the card reader 56 on the body of a 
25 vehicle at a charging point, this causes a REQUEST FOR HIRE message to be sent from the in- 25 
car computer 14 to the central computer 10 via the charging station computer 12. The central 
computer 10 checks whether the credit card is acceptable by accessing the central credit card 
register and sends a GOOD/BAD CARD signal, as appropriate, to the in-car computer 14 via the 
charging station computer 12 to authorise or refuse the hire respectively. 
30 In response to a request for parking space made using the keypad 30 at a charging station, 30 
the central computer 10 checks whether there are any parking spaces presently available at the 
particular charging station to which the request relates and sends a signal confirming or refusing 
the request, as appropriate, which is displayed on the display 32 at the first charging station. 
Messages of a general nature can be transmitted from the central computer 10 to the in-car 
35 computers 14 via the charging station computers 12 and to the charging station computers 12 35 
themselves. When a vehicle leaves a charging point, the charging station computer 12 senses 
this by failure of the in-car computer 14 of that vehicle to response to its polling signals and 
then sends a DEPARTURE message to the central computer 10. 
Signals for turning vehicle beacons off, returning vehicles to service and for releasing vehicle 
40 reservations are sent from central computer 10 to the in-car computers 14 of the respective 40 
vehicles via the charging station computers 12. 

The central computer 10 also sends a signal to each of the charging station computers 12 
indicating whether there are any spaces still available at that charging station, i.e. whether there 
are any charging points not already occupied by vehicles which are not reserved, and the 
45 charging stati on c omputer 12 operates the sign 36 accordingly. 45 
The CASSETTE DUMP message is employed to transfer information recorded on the charging 
station cassette during periods of non-communication with the central computer 10. 

The STRATEGIC DATA message sent from the central computer 10 to the charging station 
computers 12 relates to housekeeping tasks performed by the central computer 10 once a day 
50 and contains information including the next 7 day's tariff. 50 
Use of the urban transport system will now be described. 

If, on entering a charging station, a new hirer wipes a credit card through the card reader 28 
of the charging station computer 12, a GO TO CAR message will appear on the display 32. If 
the user finds that in fact there are no vehicles at that particular charging station which are 
55 presently available for hire, on again wiping its card through the reader 28, the display 32 will 55 
indicate the expected time at which the next vehicle will complete battery charging or will return 
from hire. 

The user may make a request to reserve a parking space at the same charging station or at a 
different charging station by pressing the PARKING key of the keypad 30. The display 32 then 

60 indicates the consequence of making such a request i.e. details of the charge which will be 60 
levied for res rving a parking space irrespective of whether it is taken up. The display 32 then 
indicat s a r quest for confirmation of the parking reservation which is confirmed by the user 
keying in code 999 and pressing the ENTER key. The display 32 then requests entry of the 
destination code of the charging station in question which the user keys in by ref rring to the 

65 map provided and by using the numeric keys follow d by th ENTER key. Thes entries are 65 
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echoed on the display 32. A PARKING SPACE REQUEST message is then sent to the central 
computer 10 and a PLEASE WAIT MESSAGE is indicated n the display 32. C nfirmation or 
refusal of the request is subsequently displayed on the display 32. The central computer 
allocates a certain amount of time for the reserved parking space to be taken up depending on 
5 the distance between the charging station at which the parking space reservation request is 5 
made and the one which is the user's intended destination. After that time the reservation is 
automatically cancelled. 

The user then goes to any vehicle displaying AVAILABLE FOR HIRE on the external vehicle 
display 58 and wipes his credit card through the jaws of the external reader 56 on the vehicle. 

10 This will cause the display 58 to indicate a PLEASE WAIT message. A REQUEST FOR HIRE 10 
message will then be sent to the central computer 10 via the charging station computer 12 
which will either authorise or refuse the hire. If the central computer 10 is temporarily unavail- 
able then no new hires will be authorised until later. 
The effect of an AUTHORISED HIRE message being relayed to the in-car computer 14 by the 

15 charging station computer 12 is that the hirer's credit card number, the current tariff, last 15 
mileage reading and time of the day are stored in the memory of the in-car computer 14. If 
necessary, the mileage and time of day information is updated in the memory of the in-car 
computer 14. An O.K. message is displayed on the display 58 of the vehicle and the in-car 
computer processor 46 sends a signal to the solenoid switches controlling the vehicle door 

20 locks so as to unlock the door. From then on, the hire time is recorded. The display 58 then 20 
indicates an ON HIRE message. 

If the central computer 10 finds the user's credit card to be invalid it will refuse the hire and a 
HIRE REFUSED message will appear on the display 58. 
An authorised hirer can then drive the vehicle away from the charging point. The vehicle is 

25 fitted with a press-button ignition so that no separate ignition key is necessary. 25 
While on hire, the in-car computer 14 computes the current hire charge using the stored tariff 
and a messure of the elapsed time since the beginning of the hire. The driving time which 
remains is calculated using signals from the battery state and motor current sensors as it 
depends on the initial charge state of the battery and a running integral of time and motor 

30 current. An audible warning is issued by the voice synthesizer 64 when the estimated time to 
"battery low" condition is 15 minutes. The current hire charge is displayed on the internal 
display 62 and the driving time remaining is represented on the LED strip display inside the 
vehicle. 

The in-car computer 14 responds to signals from the "in motion" sensor and the motor 

35 current sensor by activating the parking brake if the vehicle is stationary and the motor current 35 
is low and releasing the parking brake rf the motor current increases. 

In the event that charging of the battery is sensed when the vehicle is not at a charging point, 
the in-car computer 14 acts to operate the emergency beacon. 

During the hire, the user can park the vehicle in the normal way and by wiping his credit card 

40 through the jaws of the external card reader 56 causes the vehicle doors to be locked. On 40 
returning to the vehicle and again wiping his card through the jaws of the card reader 56 the 
doors are again unlocked and so on. The in-car computer 14 is programmed so as to recognise 
only that particular credit card during the hire of that user and will not respond to any other 
cards except a master card held by a service mechanic. 

45 Should the user press either of the UNSERVICEABLE or BEACON ON keys of the interior 45 
keypad 60, the display 62 indicates the consequence of that action and requests confirmation. If 
confirmed, the appropriate message is displayed on the external display 58 and a service 
mechanic will be called. m 
On returning to a charging station, the user connects the vehicle to a charging point at which 

50 time communication between the in-car computer 14 and the charging station computer 12 is 50 
established. The internal display 52 will show CONNECTED to advise the user of successful 
docking. The user then has the option of reserving that vehicle rf he wishes or of terminating 
the hire. He can reserve the vehicle for a predetermined period of time by pressing the RESERVE 
button on the internal keypad 60 and, if the request for reservation is confirmed, the hire will 

55 continue even if the user leaves the car and locks the doors by again wiping his credit card 55 
through the reader 56. Otherwise, the act of locking the vehicle doors with the vehicle is 
connected to a charging point will serve to terminate the hire. If the external card reader 56 on 
the vehicle is not used within a set period of time from docking of the vehicle at a charging 
point, then the car doors will automatically be locked by the in-car computer 14 and the hire will 

60 be terminated. A penalty charge may be levied in that instance. 60 
Before hire is terminated, the user will be asked, either using the internal display 62 or the 
voice synthesiser 64, to press the UNSERVICEABLE button on the keypad 60 if the car has a 
fault and to leave a written fault report. He will also be advised that a receipt may be obtained 
at the central desk. 

65 On leaving the vehicle, if the user wishes to obtain a receipt he wipes his credit card through 65 
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the card reader 28 of the charging station computer 12 and a receipt will be issued bv the 
printer 34. 

it is envisaged that each charging station may be provided with an entry barrier and a further 
card reader associated with the barrier so that hirers returning vehicles can be prevented from 
5 using parking spaces reserved by others. 5 
Although the control system is programmed to recognise standard credit cards a special 
purpose credit card may be issued to regular users. 

It is envisaged that programmed maintenance devices will be provided which can communicate 
with the in-car computers 14 using the communication link normally used for interconnecting the 
10 in-car computers 14 with the charging station computers 12. The maintenance devices will be 10 
used for test purposes. 

ft should be understood that many variations are possible whilst still falling within the scope of 
the present invention. 

In particular, any suitable wipe-through sequence of a credit card in the card reader 56 may be 
15 devised for initiating the hire transaction and thereafter for unlocking and locking the car doors. 15 
The in-car computers 14 may be programmed so as to lock and unlock all the vehicle doors 
simultaneously or so as to lock and unlock only the driver's door as required. 

As well as or instead of unlocking and locking the car doors further facilities may be con- 
trolled by the control system, for example, activation of the vehicle ignition. 
20 Furthermore, it should be appreciated that the control system according to the present inven- 20 
tion may be adapted to be used in connection with any type of appliance let for hire for 
example all types of machinery, tools etc in which an information carrying token can be used as 
a key to operate an on/off switch or to access other control means. 
In a second embodiment of the present invention, the control system is adapted for use in an 
25 hotel. 25 
Referring to Fig. 4, a central computer 100 is in duplex communication with several card 
reading units 102, each associated with a door of a hotel room, and the system is operable to 
permit a credit card to be used as a room key. 
The central computer 100 poles the card reading units 102 in sequence to collect data from 
30 lOoT t0 SGnd messa9es to them * A rece P tlon terminal 104 is linked to the central computer 30 

On the arrival of a guest, reception personnel key in information at the reception terminal 104 
relating to a particular credit card together with information identifying the particular room in 
which the guest will be staying which is sent to the central computer 100. The central computer 
35 sends a signal to the card reading unit 102 associated with the particular room so that 35 
thereafter the reading unit 102 recognises the guest's credit card as the key to the room. When 
the user inserts his or her credit card into the card reading unit in accordance with a predeter- 
mined sequence a solenoid switch is operated which locks or unlocks the room door. 

During the stay of that guest, the card reading unit 102 will not recognise any other credit 
40 cards as s a key to the room. However, it is envisaged that selected members of the hotel staff 40 
will be provided with master cards recognised by all of the card reading units 102 at all times. 

When the guest is leaving the hotel, reception personnel instruct the central computer 100 
accordingly which causes the originally received identifying information to be wiped from mem- 
ory so that that particular guest's credit card can no longer be used as a room key. 
45 Alternatively, the central control 100 may be programmed to send a disabling signal to a card 45 
reading unit 102 associated with a particular room at the end of a predetermined period of time 
in response to information supplied by reception personnel relating to a guest's duration of stay. 

It should be appreciated that the hotel control system described above can be extended to 
control the use of further facilities, for example, electrical appliances in the hotel rooms, by 
50 providing further card reading units in the rooms. Thus, by arranging for recordal of the amount 50 
of use of particular facilities by a hotel guest, it becomes possible to bill each guest only for 
facilities actually used. 

In relation to both of the embodiments described above, instead of a credit card, any other 
type of information carrying ' token can be used together with an appropriate means for reading 
55 information from the token. 55 

CLAIMS 

1. A control system for use in connection with one or more facilities comprising means for 
receiving inf rmation identifying a particular token, which system is operable so as, when 

60 intermittently presented with the tok n after receiving said identifying information, t recognise 60 
that token as a key and to permit access to and/or operation of one or more of the facilities 
until a predetermined tim has elapsed or a selected event has occurred and until then not to 
recognise tokens of other random users, and thereafter no longer to permit access to and/or 
operation of the or each facility until further identifying information relating to a valid token is 

65 received. 
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2. A control unit according to claim 1 wherein the selected event is presentation of the token 
to the control system in a particular manner and/or at a particular time. 

3. A control system according to claim 1 or claim 2 which initially checks the validity of the 
token and is operable to cause rejection of an invalid token. 

5 4. A control system according to any preceding claim wherein the identifying information is 5 
initially received as a result of reading information from the token. 

5. A control system according to any of claims 1 to 3 wherein the identifying information is 
initially received from a source other than the token. 

6. A control system according to any preceding claim which is operable to permit a token to 

10 function as a key to a lock. 10 

7. A control system according to any preceding claim adapted for use with a token in the 
form of a credit card. 

8. A control system according to any preceding claim comprising a central control unit in 
communication with a plurality of auxiliary control units wherein each auxiliary unit is in communi- 

15 cation with at least one facility and is responsive to signals from the central control unit. 15 

9. A control unit according to claim 8 wherein the selected event is the receipt by an 
auxiliary control unit of a selected signal from the central control unit. 

10. A control system according to claim 8 or claim 9 wherein the identifying information is 
sent to the auxiliary control units from the central control unit. 

20 11. A control system according to claim 8 or claim 9 wherein the identifying information is 20 
sent to the central control unit via an auxiliary control unit. 

1 2. A control system according to any preceding claim adapted for use. in a vehicle transpor- 
tation system. 

13. A control system according to claim 12 operable to permit a token to function as a key 

25 to the door of a vehicle. 25 

14. A control system according to claim 12 when dependent on claim 8 wherein an auxiliary 
control unit is disposed in each vehicle. 

15. A control unit according to claim 14 wherein the vehicles are electrically powered and 
the auxiliary control units are connectable to the central control unit via intermediate control units 

30 associated with means for charging the vehicles. 30 

16. A control system according to any of claims 12 to 15 wherein means for reading 
information from a token is mounted externally on the body of each vehicle. 

17. A control system according to any of claims 12 to 16 wherein the selected event is 
presentation of the token to token reading means associated with the relevant vehicle when the 

35 vehicle is connected to a charging point after having just returned from hire. 35 

18. A control system according to any of claims 1 to 1 1 operable to control the use of one 
or more facilities in a building. 

19. A control system according to claim 18 when dependent on claim 8 wherein each 
auxiliary control unit is asociated with a particular room in the building. 

40 20. A control system according to claim 19 wherein one or more of the auxiliary control 40 
units operate locks on the doors in the building. 

21. A control system for use in connection with one or more facilities comprising means for 
receiving information identifying a payment token and/or the owner thereof to enable payment to 
be made for the use of the or each facility, which system is adapted also to recognise the 

45 payment token as a key and to permit access to and/or operation of one or more of the 45 
facilities when intermittently presented with the token after receiving said identifying information. 

22. A control system according to claim 21 wherein the payment token is in the form of a 
credit card. 

23. A control system substantially as herein described with reference to and as illustrated in 

50 Figs. 1 to 3 or Fig. 4 of the accompanying drawings. 50 

CLAIMS 

Claims 1, 2, 9, 15, 18 to 23 above have been deleted or textuatly amended. 
New or textually amended claims have been filed as follows:- 

55 1 . A control system for use in connection with one or more facilities of a vehicle comprising 55 
means for receiving information identifying a particular token, which system is operable so as, * 
when intermittently presented with the token after receiving said identifying information, to 
recognise that token as a key and to permit access to and/or operation of one or more of the 
facilities until a predetermined time has elapsed or a selected event has occurred and until then 

60 not to recognise tokens of other random users, and thereafter no longer to permit access to 60 
and/or operation of the or each facility until further identifying information relating to a valid 
token is r ceiv d. 

2. A control system according to claim 1 wherein th sel cted event is presentation of the 
token to the control system in a particular manner and/or at a particular time. 
65 9. A control system according to daim 8 wh rein the selected v nt is the r ceipt by an 65 
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auxiliary control unit f a selected signal fr m the central c ntrol unit. 

15. A control system according to claim 14 wherein the vehicles are electrically powered and 
the auxiliary control units are connectable to the central control unit via intermediate control units 
associated with means for charging the vehicles. 
5 18. A control system according to any preceding claim comprising means for receiving 5 
information identifying a payment token and/or the owner thereof to enable payment to be made 
for the use of the or each facility, which system is adapted also to recognise the payment token 
as a key and to permit access to and/or operation of one or more of the facilities when 
intermittently presented with the token after receiving said identifying information. 
10 19. A control system according to claim 18 comprising means for calculating the costs 10 
involved in the use of the or each facility. 

20. A control system according to claim 19 which is arranged so that presentation or 
information identifying the payment token and/or the owner thereof initiates calculation of the 
costs involved. 

15 21. A control system substantially as herein described with reference to and as illustrated in 15 
Figs. 1 to 3 or Fig. 4 of the accompanying drawings. 
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